Netscape NETSCAPE DIRECTORY SERVER 6.1 - ADMINISTRATOR, Administrator'S Manual

Page: 99 / 578

Creating and Maintaining Database Links
Chapter 3 Configuring Directory Databases 99
Once you have modified the component you allow to chain, you must restart the
server in order for the modification to take affect.
Referential
integrity plug-in This plug-in ensures that updates made to attributes
containing DNs are propagated to all entries that contain
pointers to the attribute. For example, if you delete an entry
that is a member of a group, the entry is automatically
removed from the group. Using this plug-in with chaining
helps simplify the management of static groups when the
group members are remote to the static group definition.
To chain this component’s operations, specify the following:
nsActiveChainingComponents:
cn=referential integrity
postoperation,cn=plugins,cn=config
Read, write, search, and
compare
UID uniqueness
plug-in This plug-in checks that all the values for a specified
uid
attribute are unique (no duplicates). If you allow this
plug-in to chain, it confirms that the
uid
attribute values are
unique even on attributes changed through a database link.
To chain this component’s operations, specify the following:
nsActiveChainingComponents: cn=uid
uniqueness,cn=plugins,cn=config
Read, search, and
compare
NOTE You cannot chain the following components:
• Roles plug-in
• Password policy component
• Replication plug-ins
When enabling the Referential Integrity plug-in on servers issuing
chaining requests, be sure to analyze your performance resource
and time needs as well as your integrity needs. Integrity checks can
be time consuming and draining on memory/CPU.
For further information on the limitations surrounding ACIs and
chaining see “ACI Limitations” on page 196.
Table 3-2
Components Allowed to Chain (Continued)
Component Name Description Permissions